git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

Intel-Linux-Processor-Microcode-Data-Files

Paquete de Microcódigo para Procesadores Intel para Linux Acerca de El Paquete de Actualización de Microcódigo MCU para Procesadores Intel proporciona un mecanismo para publicar actualizaciones para avisos de seguridad y problemas funcionales, incluyendo erratas. Además, los MCU son responsables ...

openclaw_vulnerabilities_and_solutions

OpenClaw — vulnerabilidades, endurecimiento y despliegue en VPS Documentación pública saneada sobre el despliegue seguro de OpenClaw en VPS: arquitectura de acceso, vulnerabilidades conocidas e incidentes prácticos con soluciones. Documentación pública y saneada de operaciones reales de OpenClaw:...

red-shadow

Red-Shadow Lightspin AWS IAM Vulnerability Scanner Description Scan your AWS IAM Configuration for shadow admins in AWS IAM based on misconfigured deny policies not affecting users in groups discovered by Lightspin's Security Research Team. The tool detects the misconfigurations in the following...

retire.js

Retire.js 你所依赖的，也必须退役 存在一个庞大的 JavaScript 库生态系统，可用于 Web 和 Node.js 应用程序。虽然这些库显著加速了开发，但它们也需要持续维护，以确保安全漏洞得到及时处理。2013 年，“使用含有已知漏洞的组件”被列入 OWASP Top 10 关键安全风险列表，凸显了过时或不安全的依赖项可能对 Web 应用程序构成的严重威胁。Retire.js 的创建就是为了帮助开发者识别具有已知漏洞的 JavaScript 库版本，尤其是那些不在包清单中、而只是下载并放入源码控制的库。 Retire.js 可以通过多种方式使用： 1. 作为命令行扫描器 ...

vulnx

VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms https://github.com/anouarbensaad/vulnx/archive/master.zip VulnX Wiki • How To Use • Compatibility • Library • Vulnx is An Intelligent Bot Auto Shell Injector that detects vulnerabilities...

peniot

PENIOT: Penetration Testing Tool for IoT Table of Contents Project Description What is PENIOT? Why is PENIOT required? What does PENIOT provide? Build Instructions Documentation Testing Contributors Developer's Note Project Poster Project Description What is PENIOT? PENIOT is a penetration testin...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

fbht

FBHT Facebook Hacking Tool Python - -version 2.7.3 Windows/Linux IMPORTS Selenium Matplotlib-1.2.1 Networkx-1.8.1 Numpy-1.7.1 Pygraphviz-1.1 Simplejson-3.3.0 Mechanize-0.2.5 Other: gephi-0.8.2-beta Graphs software Recomendation: Use setuptools for the dependencies S.O Working on Windows 7 64/32...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

JSONPath

ver también licencias para dependencias de desarrollo JSONPath Plus Analiza, transforma y extrae selectivamente datos de documentos JSON y objetos de JavaScript. jsonpath-plus expande la especificación original para añadir algunos operadores adicionales y hace explícitos algunos comportamientos q...

security_articles

securityarticles- 连接式V16信标中的漏洞 文章解释了我发现的Help Flash IoT v16信标 中的多个漏洞。这些漏洞影响信标的通信及其通过WiFi的软件更新机制。 2025年12月...

WebGoat.NET

Webgoat.NET Código fuente: https://github.com/jerryhoff/WebGoat.NET Descargar zip: https://github.com/jerryhoff/WebGoat.NET/zipball/master Esta aplicación web es una plataforma de aprendizaje que intenta enseñar sobre vulnerabilidades de seguridad web comunes. Contiene fallos de seguridad genéric...

slither

Slither, the smart contract static analyzer Join the Empire Hacking Slack - Discussions and Support Slither is a Solidity & Vyper static analysis framework written in Python3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to...

ROOT-APP-NPM-CVE-2026-54306 CVE-2026-54306 in n8n - Patched by Root

Root has patched CVE-2026-54306 in the n8n package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44792 CVE-2026-44792 in n8n - Patched by Root

Root has patched CVE-2026-44792 in the n8n package for Root:npm. Multiple fixed versions available...

adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

Penetration_Testing_POC

PenetrationTestingPOC 搜集有关渗透测试中用到的POC、脚本、工具、文章等姿势分享，作为笔记吧，欢迎补充。 请注意所有工具是否有后门或者其他异常行为，建议均在虚拟环境操作。 PenetrationTestingPOC 请善用搜索Ctrl+F查找 IOT Device&Mobile Phone Web APP 提权辅助相关 PC tools-小工具集合 文章/书籍/教程相关 说明 请善用搜索Ctrl+F查找 IOT Device&Mobile Phone 天翼创维awifi路由器存在多处未授权访问漏洞 华为WS331a产品管理页面存在CSRF漏洞...